home

cdn.app-soft.org

Privacy Protected

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
Gal Communication (CommuniGal) Ltd.

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
app-soft.org

Whois:
1 app-soft.org record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.installCore.Installer (M), PUP.InstallCore (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RES (M)
100.00%

Dr.Web
Trojan.InstallCore.152
33.33%

ESET NOD32
Win32/InstallCore.XX potentially unwanted application
33.33%

VIPRE Antivirus
Threat.4786018
33.33%

Bkav FE
W32.HfsAdware
33.33%

Malwarebytes
PUP.Optional.InstallCore.A
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Avira AntiVirus
PUA/InstallCore.Gen4
33.33%

G Data
Win32.Application.InstallCore.EG
33.33%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
33.33%

AVG
Generic
33.33%

Panda Antivirus
PUP/Multitoolbar
33.33%

Sophos
Generic PUA HM
16.67%

Baidu Antivirus
Adware.Win32.InstallCore
16.67%

Fortinet FortiGate
Riskware/InstallCore
16.67%

The domain cdn.app-soft.org has been seen to resolve to the following 4 IP addresses.

185.53.177.11
July 11, 2016

54.200.49.61
ec2-54-200-49-61.us-west-2.compute.amazonaws.com
April 20, 2016

54.213.176.160
ec2-54-213-176-160.us-west-2.compute.amazonaws.com
April 8, 2016

54.187.146.41
ec2-54-187-146-41.us-west-2.compute.amazonaws.com
February 29, 2016

File downloads found at URLs served by cdn.app-soft.org.

12 / 68    (Adware)
http://cdn.app-soft.org/c?x=YFjJatvgiKux24yIvjE5Q T3IERrHhRmqoEaPWO/1xA=&c=7v5ABL5fHyGWFtyFddwL6WmhQJPPfIw /dyiSt0OP2I72ijvPUp8YorKwLyKyZHWAi tpe C9i/VR42oiHYMzBher57/YXeZGWH34/nHv2idqZd2sFq3LuRalEdNlNjAS5zmMSIl4QbGoCGIinrUvA==&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=GoogleChromeSetup.exe  (9bee7639ab9a42b7445795320a6ae907)

1 / 68      (PUP)
http://cdn.app-soft.org/c?x=QAKGzpz12za48JrmuGTQ479hipo10XhngDnLamUEWU8=&c=e0UIseUWdEuMIN6/WtmP4itOxHh5LWr01gZlmDxrjlTucZOspDDrdGu3BkxOs1lDOeUFSXKhuYu 4u3gmQ zPI54CPkOll85z7RA U6Kf7o=&fallback_url=http://d3qor7nx9zb32s.cloudfront.net/.../FlvPlayerSilent2404.exe&downloadAs=WindowsMediaPlayerSetup.exe  (cab0e8cd482f354191bca6691676b6f0)

1 / 68      (Adware)
http://cdn.app-soft.org/c?x=fIgMPzlnbAS1sQRaqSM/iQU/3uhZvjM6SuJxvffSazg=&c= qZ0dXHePgzbE //WhRZgaAsUDXz/7GA LSovXafAwj8j70k Yr6IIJaV sNWH/0CWtM7Fhr3NfrBaPgA6ihE2jimmPNv8qAst5yFNcU p24BgcMGwAZvl 9O0gK/LZ93XEbmYwowT80nvgANeF1Rg==&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=GoogleChromeSetup.exe  (64105a753e51aeceb4a36ff06696e9ad)

1 / 68      (Adware)
http://cdn.app-soft.org/c?x=rIAETt2GffJPD9v5nuCB/A25nl/ROEmJFjyIdNi3QsE=&c=xZRdATT4moOu6YFBfBtXJpDF6Qa6bYx5irSSm2Ygq15bReQ5nd/ n9WBzsc4gD8pjOa3szCmvZYmNafZcF9Fb1Anq8uqauMj QU/xTP3CsiLEesbF5M6awg8hYMGYqacrpvgU200Ved6eVeANCRL1Q==&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=GoogleChromeSetup.exe  (c.exe)

1 / 68      (PUP)
http://cdn.app-soft.org/c?x=GahBYbETI U9eKTpY268rktDd5qFkOI6K7MxEusvfn0=&c=oMwvilJXxplXXjbGnhKpGb/afBfTG50SWV4Cph1tjMf808sKV3QdutSCTB0t8r8Y3HK rw1uKhMyKBTRyaz01EnO8M7ML7SlTIO6q LcUbw=&fallback_url=http://d3qor7nx9zb32s.cloudfront.net/.../FlvPlayerSilent2404.exe&downloadAs=WindowsMediaPlayerSetup.exe  (01ff8edc3def50e7f63bee7bd63b27c5)

17 / 68    (Adware)
http://cdn.app-soft.org/c?x=smcq6JOXr/2c5G0cVuWLy89jB/honJj2Q8FxEkVxzyY=&c=5krI34iVH/eeM4ensRJcpd yKdaJnBTJperTAIq2ZGrVxk0cnr5dsk4F Mky6QcfW87AlVFAABgm1aapbb 6iRxOWo422QqYqNKiUsWg7NsDHlUxFfF6uu8F1KNLofG rUvwttA/N5gMv/tS/R5BzA==&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe&downloadAs=FirefoxSetup.exe  (2c93b447927b87c7a8b02f54aea87805)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.